Mike Auty
d32fc223e2
Fix up additional imports inconsistent with the coding style.
...
Note: also remove interfaces_configuration where ever possible
(this is not possible in the interfaces directory itself
because it would cause an import loop).
2017-08-09 22:32:44 +01:00
Mike Auty
8be6869a84
Tidy up imports and adhere to the coding style of never directly importing objects.
2017-08-09 22:22:43 +01:00
Mike Auty
bfb83f0c33
Fix up silly typo (and replace another hardcoded bang).
2017-08-09 21:34:26 +01:00
Mike Auty
9c3ad5588a
Improve the error handling the LinuxSymbolCache.
2017-08-09 18:06:35 +01:00
Mike Auty
ce89564f71
Merge branch 'master' of github.com:volatilityfoundation/volatility3
2017-08-08 17:45:52 +01:00
Mike Auty
f0d7dbdf68
Add in translate method for TranslationLayers.
2017-08-08 17:45:36 +01:00
Mike Auty
fc0fa96ed8
Replace hardcoded exclamation marks for constants.BANG
2017-08-08 09:50:22 +01:00
Mike Auty
2caeeb275e
First stab at refactoring the add_process_layer code out of the Windows _EPROCESS structure.
2017-08-07 21:42:10 +01:00
Mike Auty
ab8d76eeef
Revert the generator changes, the visiting function should be used instead.
2017-08-02 10:40:16 +01:00
Mike Auty
d8c53b63bf
Don't forget to iterate over the populate generator.
2017-08-02 10:05:12 +01:00
Mike Auty
ff3d5e8f3b
Maintain a row count for populated tree grids.
2017-08-01 15:39:38 +01:00
Mike Auty
029fa8e940
Ensure ColumnSortKey is callable, and make sure the top level direction is considered.
2017-08-01 15:39:01 +01:00
Mike Auty
80508c8711
Allow for ascending or descending sort order.
2017-08-01 02:41:55 +01:00
Mike Auty
5e9b2306d4
Ensure symbol tables are created with unique names.
2017-07-31 16:34:02 +01:00
Mike Auty
d119f372dc
Ensure the populate generator is actually a generator.
2017-07-31 13:52:54 +01:00
Mike Auty
b8f7433dba
Ensure that non-multiprocessing does not use multiprocessing.
2017-07-30 22:40:33 +01:00
Mike Auty
9c8add5d5c
Ensure the dtb is not uninitialized.
2017-07-30 21:10:12 +01:00
Mike Auty
b7c8c8a058
Improve the docstrings for automagic.
2017-07-29 12:53:35 +01:00
Mike Auty
775ece3cb2
Convert the 'ntkrnlmp' requirement into an 'nt' requirement.
2017-07-24 15:43:34 +01:00
Mike Auty
8ad9fbfd24
Ensure imported plugins have their correct requirements fulfilled (even if they change).
2017-07-24 15:41:47 +01:00
Mike Auty
4b0515aa65
Fix up the logging so there are five standard levels, and list the cache location.
2017-07-24 01:39:29 +01:00
Mike Auty
d34b344507
Ensure linux doesn't bog down windows searching.
2017-07-20 19:54:10 +01:00
Mike Auty
c0a8ddd9a3
Improve the progress messages.
2017-07-20 19:35:12 +01:00
Mike Auty
0b6e50daba
Convert pdbscanner to a generator.
2017-07-20 17:47:21 +01:00
Mike Auty
b8fe2a96be
Avoid a variable-reuse issue.
2017-07-20 11:58:16 +01:00
Mike Auty
14ae9db745
Improve the progress output.
2017-07-20 11:40:30 +01:00
Mike Auty
469afc800b
Revert "Change the behaviour of multithreaded scans to return results as soon as possible (at the cost of ordering)."
...
This reverts commit 8c4bdc8c61 .
2017-07-20 11:09:42 +01:00
Mike Auty
f8767af1b8
Catch the most general InvalidAddressException in case it's thrown by a lower layer.
2017-07-20 00:58:07 +01:00
Mike Auty
8087f86bcf
Remove debugging statements.
2017-07-20 00:51:03 +01:00
Mike Auty
fbd70438a0
Slightly more error checking.
2017-07-20 00:49:56 +01:00
Mike Auty
03cdd91fbf
Add in the capability to merge two config dicts (so that manually set settings aren't overwritten).
2017-07-20 00:49:36 +01:00
ikelos and GitHub
fe66301cf3
Merge pull request #8 from volatilityfoundation/mhl-cmhive
...
move the hive name decision to _CMHIVE extension for hivelist (and ot…
2017-07-19 20:43:05 +01:00
iMHLv2
770dba1f0a
use @property and update pydoc for _CMHIVE.name. catch AttributeError instead of checking hasattr
2017-07-19 18:12:50 +00:00
iMHLv2
b9adcb2b87
move the hive name decision to _CMHIVE extension for hivelist (and other plugins in the future)
2017-07-19 17:10:49 +00:00
Mike Auty
e2450a0458
Add in more debugging information.
2017-07-19 17:52:19 +01:00
ikelos and GitHub
a423b034a2
Merge pull request #7 from volatilityfoundation/mhl-modules
...
add the modules plugin for windows
2017-07-19 15:26:53 +01:00
iMHLv2
cc8114e872
add the modules plugin for windows
2017-07-18 23:51:35 +00:00
iMHLv2
60e67a80d8
fix a misleading pydoc string in the hivelist plugin
2017-07-18 23:50:38 +00:00
iMHLv2
8493f4c4d6
add hivelist plugin for windows
2017-07-18 23:21:44 +00:00
Mike Auty
edcfda0688
Change the stacking order, to ensure Lime gets loaded before linux.
2017-07-17 22:51:42 +01:00
Mike Auty
d2eef99e37
Don't try making URIs into URIs.
2017-07-17 21:52:01 +01:00
Mike Auty
9f3470a8e9
Speed up linux caching by allowing lack of validation. This should NOT be enabled without knowing exactly what you're doing.
2017-07-17 21:47:31 +01:00
Mike Auty
d49e956546
Improve file URL handling.
2017-07-17 18:33:45 +01:00
Mike Auty
e152f929e0
Ensure we unquote the parse URL path when opening standard files.
2017-07-17 18:22:12 +01:00
Mike Auty
f2bfd39c57
Add in more debugging information.
2017-07-17 17:17:46 +01:00
Mike Auty
23ccb4d4c8
Fix the real root cause, files not containing a banner.
2017-07-17 17:11:05 +01:00
Mike Auty
9b9792f3e2
Ensure we save the results of checking for non-existant files.
2017-07-17 17:06:52 +01:00
Mike Auty
5ca4f8e788
Use a central bit of code to do the load and unload of cached linux banners.
2017-07-17 16:38:25 +01:00
Mike Auty
f6a55876d0
Add in check to avoid unsightly exceptions.
2017-07-17 16:19:36 +01:00
Mike Auty
8b95480e88
Write the cached linuxbanners after each one so that cancellations don't require re-runs.
2017-07-16 22:59:01 +01:00